CVE-2026-112019
Deferred Deferred - Pending Action

Heap Out-of-Bounds Read in cgltf Library

Publication date: 2026-10-18

Last updated on: 2026-10-18

Assigner: VulnCheck

Description
cgltf through 1.15 contains a heap out-of-bounds read vulnerability in cgltf_accessor_unpack_floats() that advances the sparse values cursor by the base bufferView byteStride. Attackers can supply a crafted glTF or GLB file that passes cgltf_validate() to read adjacent heap memory into vertex data or crash applications.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-18
Last Modified
2026-10-18
Generated
2026-10-18
AI Q&A
2026-10-18
EPSS Evaluated
N/A
NVD
CVE-2026-112019
EUVD
EUVD-2026-103472

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
jkuhlmann cgltf 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-125 The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

cgltf through version 1.15 has a heap out-of-bounds read vulnerability in the function cgltf_accessor_unpack_floats(). The issue occurs because the function incorrectly advances the sparse values cursor by the base bufferView byteStride, which can lead to reading adjacent heap memory or crashing applications.

Detection Guidance

Detecting this vulnerability requires inspecting applications using cgltf versions up to 1.15. Check for glTF/GLB file processing in applications. Use commands like 'strings' or 'hexdump' on binaries to identify cgltf version. Monitor for crashes or memory corruption when processing glTF files.

Impact Analysis

Attackers can exploit this by providing a specially crafted glTF or GLB file that passes validation. This may result in reading sensitive data from adjacent memory or causing application crashes.

Compliance Impact

This vulnerability could potentially impact compliance with GDPR and HIPAA by enabling unauthorized access to adjacent heap memory, which may include sensitive data. If exploited, it could lead to data leaks or crashes in applications handling 3D graphics, violating confidentiality and integrity requirements under these regulations.

Mitigation Strategies

Update cgltf to the latest version beyond 1.15. If updating is not possible, restrict processing of untrusted glTF/GLB files. Implement input validation for glTF files before processing. Monitor applications for crashes or memory corruption during glTF file handling.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-112019. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart